Vulnerabilities in TryGhost
88 resultsCVE-2026-105648MEDIUMGhost: Private IP Filtering Bypass via IPv6 Transition AddressesEPSS 0.3%CVE-2026-22597MEDIUMGhost has SSRF via External Media InlinerEPSS 0.3%CVE-2026-24778HIGHGhost vulnerable to XSS via malicious Portal preview linksEPSS 0.3%CVE-2026-104414HIGHGhost from 2.5.0 before 6.64.0 Stored XSS via oEmbed Photo ResponsesEPSS 0.3%CVE-2026-70595MEDIUMGhost: Server-Side Request Forgery Mitigation IssueEPSS 0.3%CVE-2026-105643HIGHGhost: Stored XSS via Embed Card PreviewsEPSS 0.3%CVE-2026-103290MEDIUMGhost 6.14.0 before 6.27.0 Path Traversal via ImageSizeEPSS 0.3%CVE-2026-105680MEDIUMGhost: Authorization Issue Allowed Author Role to Delete any PostEPSS 0.3%CVE-2026-103277HIGHGhost 2.5.0 before 6.34.0 Untrusted Script Execution via oEmbedEPSS 0.3%CVE-2026-103278HIGHGhost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframeEPSS 0.3%CVE-2026-70589MEDIUMGhost: Archived Offers can be RedeemedEPSS 0.3%CVE-2026-103283HIGHGhost 6.20.0 before 6.57.1 Authentication Bypass via Session HandlingEPSS 0.3%CVE-2026-105642HIGHGhost: Remote Code Execution via Bookmark Card ImagesEPSS 0.3%CVE-2026-103267MEDIUMGhost 0.5.0 before 6.62.0 Arbitrary Email Registration via Staff InviteEPSS 0.3%CVE-2026-105681MEDIUMGhost: Authorization Bypass in Comments FeatureEPSS 0.3%CVE-2026-105652LOWGhost: Password Hash Ordering Disclosure in Ghost Admin APIEPSS 0.3%CVE-2026-103273MEDIUMGhost 4.3.0 before 6.58.0 Incorrect Authorization via Staff TokenEPSS 0.3%CVE-2026-104413HIGHGhost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card ImagesEPSS 0.3%CVE-2026-104411HIGHGhost 6.22.1 before 6.64.0 Stored XSS via Local Storage File UploadsEPSS 0.3%CVE-2026-70594MEDIUMGhost: Session Fixation in Ghost AdminEPSS 0.2%